{"schemaVersion":3,"id":"SUSE-SU-2026:4583-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update 5.2.1 for Multi-Linux Manager Client Tools\n\nThis update fixes the following issues:\n\nmgr-push:\n\n- Version 5.2.5-0\n  * Remove token based authentication mechanism for package_push (bsc#1230949)\n\nspacecmd:\n\n- Version 5.2.10-0\n  * Pre-filter errata in system_applyerrata to avoid using API calls for all existing errata (bsc#1267261)\n- Version 5.2.9-0\n  * Update translation strings\n\nspacewalk-client-tools:\n\n- Version 5.2.7-0\n  * Update translation strings\n\nvenv-salt-minion:\n\n- CVE-2026-13346: Arbitrary file installation via malicious package indexes. Remove ensurepip with bundled .whl\n  files. (bsc#1273094)\n- CVE-2026-0864: Normalize all line endings (CR, CRLF, and LF) in configparser (bsc#1269066, gh#python/cpython#143927)\n- CVE-2026-1502: reject CR/LF in HTTP tunnel request headers (bsc#1261969, gh#python/cpython#146211)\n- CVE-2026-3276: Fix O(n^2) canonical ordering in unicodedata.normalize() (bsc#1267581, gh#python/cpython#149079)\n- CVE-2026-4360: Pass filter_function to TarFile._extract_one() during .extract() (bsc#1269959,\n  gh#python/cpython#151987)\n- CVE-2026-4786: fix webbrowser %action substitution bypass of dash-prefix check (bsc#1262319,\n  gh#python/cpython#148169)\n- CVE-2026-6019: protect against HTML injection by Base64-encoding cookie values embedded in JS (bsc#1262654,\n  gh#python/cpython#90309)\n- CVE-2026-6100: prevent dangling pointer, which can end in the use-after-free error (bsc#1262098,\n  gh#python/cpython#148395)\n- CVE-2026-7210: Use XML_SetHashSalt16Bytes in pyexpat/_elementtree when possible (bsc#1264962,\n  gh#python/cpython#149018)\n- CVE-2026-7774: tarfile.data_filter: validate written link target (bsc#1267821, gh#149486)\n- CVE-2026-8328: Make ftplib not trust the PASV response (bsc#1265268)\n- CVE-2026-11940: fix the symlink escape via tarfile hardlink-extraction fallback (bsc#1268977)\n- CVE-2026-11972: Make tarfile._Stream.seek break at EOF (bsc#1269788, gh#python/cpython#151981)\n- CVE-2026-15308: Fix quadratic complexity in incremental parsing in HTMLParser (bsc#1271192,\n  gh#python/cpython#153030)\n- CVE-2026-8643: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file\n  overwrite (bsc#1266669)\n- CVE-2026-6357: pip self-update functionality can import newly installed modules after wheel installation (bsc#1263442)\n- CVE-2026-3219: pip doesn't reject concatenated ZIP (bsc#1262429)\n- CVE-2026-1703: files may be extracted outside the installation directory when installing and extracting maliciously\n  crafted wheel archives (bsc#1257599, gh#pypa/pip#13777)\n- CVE-2024-22195: Fix compiler error when checking if required blocks in parent templates are xmlattr filter does not\n  allow keys with spaces. (bsc#1218722)\n- CVE-2026-45409: Specially crafted inputs to idna.encode() can bypass earlier security fix (bsc#1265413)\n- CVE-2026-44431: sensitive information disclosure due to sensitive headers being forwarded across origins in proxied\n  low-level redirects (bsc#1265267)\n- CVE-2026-49825: The known link attributes in ``lxml.html.defs.link_attrs`` were missing ``xlink:href``, which can be\n  used for URL bypass attributes in embedded SVG/MathML/etc. content. (bsc#1270285)\n  https://github.com/fedora-python/lxml_html_clean/security/advisories/GHSA-4jhm-jv67-739f\n- CVE-2026-41066: This release fixes a possible external entity injection (XXE) vulnerability in ``iterparse()`` and\n  the ``ETCompatXMLParser``. (bsc#1263254)\n- CVE-2026-3446: Preventing ignoring excess Base64 data after the first padded quad in non-strict (default) mode.\n  (bsc#1261970, gh#python/cpython#145264)\n- CVE-2026-3479: pkgutil.get_data() has the same security model as open(). The documented limitations ensure\n  compatibility with non-filesystem loaders; Python doesn't check that. (bsc#1259989, gh#python/cpython#146121)\n- CVE-2026-27459: large cookie value can lead to a buffer overflow (bsc#1271428)\n- CVE-2026-49853: authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient (bsc#1268395)\n- CVE-2026-49854: out-of-bounds memory access via C extension (bsc#1268396)\n- CVE-2026-49855: AsyncHTTPClient accumulates decompressed chunks without size limit (gzip bomb) (bsc#1268397)\n- CVE-2026-40475: improper input handling of null bytes can lead to silent data truncation and security-state\n  inconsistency (bsc#1262803)\n- CVE-2025-13836: limit http.client response read in NXOS modules (bsc#1254400)\n- Updated bundled python module pip to 25.0.1\n- Updated bundled python module jinja2 to 3.1.6\n- Updated bundled python module lxml to 6.1.1\n- Prevent broken Salt Bundle on Ubuntu due regression in 'tar' package from Ubuntu repositories (bsc#1271613)\n- Remove unused paramiko python module from the bundle.\n- Switch apache2ctl to apachectl for SUSE OSes (bsc#1252286)\n- Support attrlist in ldap.managed (bsc#1257151)\n- Use AsyncHTTPClient in salt.utils.http (bsc#1268325)\n- Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822)","dates":{"published":"2026-10-08T08:21:47.000Z","modified":"2026-10-08T19:15:05.005Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"mgr-push&distro=SUSE Multi Linux Manager Tools RES-7","name":"mgr-push","label":"mgr-push&distro=SUSE Multi Linux Manager Tools RES-7","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/mgr-push&distro=SUSE Multi Linux Manager Tools RES-7","purlType":"rpm","versions":[{"text":"< 5.2.5-70002.3.12.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.2.5-70002.3.12.2","eol":null,"hubHref":null},{"vendor":"suse","product":"mgr-push&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","name":"mgr-push","label":"mgr-push&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/mgr-push&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","purlType":"rpm","versions":[{"text":"< 5.2.5-70002.3.12.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.2.5-70002.3.12.2","eol":null,"hubHref":null},{"vendor":"suse","product":"saltbundlepy-cffi&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","name":"saltbundlepy-cffi","label":"saltbundlepy-cffi&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/saltbundlepy-cffi&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","purlType":"rpm","versions":[{"text":"< 1.17.1-70002.3.6.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.17.1-70002.3.6.2","eol":null,"hubHref":null},{"vendor":"suse","product":"saltbundlepy-core&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","name":"saltbundlepy-core","label":"saltbundlepy-core&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/saltbundlepy-core&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","purlType":"rpm","versions":[{"text":"< 3.11.15-70002.4.15.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.11.15-70002.4.15.1","eol":null,"hubHref":null},{"vendor":"suse","product":"saltbundlepy-cryptography&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","name":"saltbundlepy-cryptography","label":"saltbundlepy-cryptography&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/saltbundlepy-cryptography&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","purlType":"rpm","versions":[{"text":"< 3.3.2-70002.3.6.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.3.2-70002.3.6.2","eol":null,"hubHref":null},{"vendor":"suse","product":"saltbundlepy-cssselect&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","name":"saltbundlepy-cssselect","label":"saltbundlepy-cssselect&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/saltbundlepy-cssselect&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","purlType":"rpm","versions":[{"text":"< 1.3.0-70002.3.6.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.3.0-70002.3.6.2","eol":null,"hubHref":null},{"vendor":"suse","product":"saltbundlepy-editables&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","name":"saltbundlepy-editables","label":"saltbundlepy-editables&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/saltbundlepy-editables&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","purlType":"rpm","versions":[{"text":"< 0.5-70002.3.3.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.5-70002.3.3.2","eol":null,"hubHref":null},{"vendor":"suse","product":"saltbundlepy-exceptiongroup-test&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","name":"saltbundlepy-exceptiongroup-test","label":"saltbundlepy-exceptiongroup-test&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/saltbundlepy-exceptiongroup-test&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","purlType":"rpm","versions":[{"text":"< 1.2.2-70002.3.3.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.2-70002.3.3.2","eol":null,"hubHref":null},{"vendor":"suse","product":"saltbundlepy-exceptiongroup&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","name":"saltbundlepy-exceptiongroup","label":"saltbundlepy-exceptiongroup&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/saltbundlepy-exceptiongroup&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","purlType":"rpm","versions":[{"text":"< 1.2.2-70002.3.3.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.2-70002.3.3.2","eol":null,"hubHref":null},{"vendor":"suse","product":"saltbundlepy-flit-core&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","name":"saltbundlepy-flit-core","label":"saltbundlepy-flit-core&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/saltbundlepy-flit-core&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","purlType":"rpm","versions":[{"text":"< 3.12.0-70002.3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.12.0-70002.3.3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"saltbundlepy-hatch-fancy-pypi-readme-test&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","name":"saltbundlepy-hatch-fancy-pypi-readme-test","label":"saltbundlepy-hatch-fancy-pypi-readme-test&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/saltbundlepy-hatch-fancy-pypi-readme-test&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","purlType":"rpm","versions":[{"text":"< 25.1.0-70002.3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 25.1.0-70002.3.3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"saltbundlepy-hatch-fancy-pypi-readme&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","name":"saltbundlepy-hatch-fancy-pypi-readme","label":"saltbundlepy-hatch-fancy-pypi-readme&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/saltbundlepy-hatch-fancy-pypi-readme&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","purlType":"rpm","versions":[{"text":"< 25.1.0-70002.3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 25.1.0-70002.3.3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"saltbundlepy-hatch-vcs-test&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","name":"saltbundlepy-hatch-vcs-test","label":"saltbundlepy-hatch-vcs-test&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/saltbundlepy-hatch-vcs-test&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","purlType":"rpm","versions":[{"text":"< 0.5.0-70002.3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.5.0-70002.3.3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"saltbundlepy-hatch-vcs&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","name":"saltbundlepy-hatch-vcs","label":"saltbundlepy-hatch-vcs&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/saltbundlepy-hatch-vcs&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","purlType":"rpm","versions":[{"text":"< 0.5.0-70002.3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.5.0-70002.3.3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"saltbundlepy-hatchling&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","name":"saltbundlepy-hatchling","label":"saltbundlepy-hatchling&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/saltbundlepy-hatchling&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","purlType":"rpm","versions":[{"text":"< 1.31.0-70002.3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.31.0-70002.3.3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"saltbundlepy-idna&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","name":"saltbundlepy-idna","label":"saltbundlepy-idna&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/saltbundlepy-idna&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","purlType":"rpm","versions":[{"text":"< 3.10-70002.3.6.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.10-70002.3.6.2","eol":null,"hubHref":null},{"vendor":"suse","product":"saltbundlepy-iniconfig-test&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","name":"saltbundlepy-iniconfig-test","label":"saltbundlepy-iniconfig-test&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/saltbundlepy-iniconfig-test&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","purlType":"rpm","versions":[{"text":"< 2.1.0-70002.3.3.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.1.0-70002.3.3.2","eol":null,"hubHref":null},{"vendor":"suse","product":"saltbundlepy-iniconfig&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","name":"saltbundlepy-iniconfig","label":"saltbundlepy-iniconfig&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/saltbundlepy-iniconfig&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","purlType":"rpm","versions":[{"text":"< 2.1.0-70002.3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.1.0-70002.3.3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"saltbundlepy-jinja2&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","name":"saltbundlepy-jinja2","label":"saltbundlepy-jinja2&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/saltbundlepy-jinja2&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","purlType":"rpm","versions":[{"text":"< 3.1.6-70002.5.3.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.6-70002.5.3.2","eol":null,"hubHref":null},{"vendor":"suse","product":"saltbundlepy-lxml&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","name":"saltbundlepy-lxml","label":"saltbundlepy-lxml&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/saltbundlepy-lxml&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","purlType":"rpm","versions":[{"text":"< 6.1.1-70002.3.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.1.1-70002.3.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"saltbundlepy-packaging&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","name":"saltbundlepy-packaging","label":"saltbundlepy-packaging&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/saltbundlepy-packaging&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","purlType":"rpm","versions":[{"text":"< 24.2-70002.3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 24.2-70002.3.3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"saltbundlepy-pip&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","name":"saltbundlepy-pip","label":"saltbundlepy-pip&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/saltbundlepy-pip&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","purlType":"rpm","versions":[{"text":"< 25.0.1-70002.3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 25.0.1-70002.3.3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"saltbundlepy-pyasn1-modules&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","name":"saltbundlepy-pyasn1-modules","label":"saltbundlepy-pyasn1-modules&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/saltbundlepy-pyasn1-modules&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","purlType":"rpm","versions":[{"text":"< 0.4.2-70002.3.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.4.2-70002.3.6.1","eol":null,"hubHref":null},{"vendor":"suse","product":"saltbundlepy-pyasn1&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","name":"saltbundlepy-pyasn1","label":"saltbundlepy-pyasn1&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/saltbundlepy-pyasn1&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","purlType":"rpm","versions":[{"text":"< 0.6.3-70002.3.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.6.3-70002.3.6.1","eol":null,"hubHref":null},{"vendor":"suse","product":"saltbundlepy-pyopenssl&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","name":"saltbundlepy-pyopenssl","label":"saltbundlepy-pyopenssl&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/saltbundlepy-pyopenssl&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","purlType":"rpm","versions":[{"text":"< 23.2.0-70002.3.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 23.2.0-70002.3.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"saltbundlepy-pyparsing&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","name":"saltbundlepy-pyparsing","label":"saltbundlepy-pyparsing&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/saltbundlepy-pyparsing&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","purlType":"rpm","versions":[{"text":"< 3.0.9-70002.3.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0.9-70002.3.6.1","eol":null,"hubHref":null},{"vendor":"suse","product":"saltbundlepy-requests&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","name":"saltbundlepy-requests","label":"saltbundlepy-requests&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/saltbundlepy-requests&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","purlType":"rpm","versions":[{"text":"< 2.34.2-70002.4.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.34.2-70002.4.6.1","eol":null,"hubHref":null},{"vendor":"suse","product":"saltbundlepy-tornado&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","name":"saltbundlepy-tornado","label":"saltbundlepy-tornado&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/saltbundlepy-tornado&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","purlType":"rpm","versions":[{"text":"< 6.3.2-70002.4.12.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.3.2-70002.4.12.1","eol":null,"hubHref":null},{"vendor":"suse","product":"saltbundlepy-urllib3&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","name":"saltbundlepy-urllib3","label":"saltbundlepy-urllib3&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/saltbundlepy-urllib3&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","purlType":"rpm","versions":[{"text":"< 2.0.7-70002.3.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.0.7-70002.3.6.1","eol":null,"hubHref":null},{"vendor":"suse","product":"saltbundlepy-websocket-client&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","name":"saltbundlepy-websocket-client","label":"saltbundlepy-websocket-client&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/saltbundlepy-websocket-client&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","purlType":"rpm","versions":[{"text":"< 1.9.0-70002.3.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.9.0-70002.3.6.1","eol":null,"hubHref":null},{"vendor":"suse","product":"saltbundlepy&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","name":"saltbundlepy","label":"saltbundlepy&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/saltbundlepy&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","purlType":"rpm","versions":[{"text":"< 3.11.15-70002.4.15.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.11.15-70002.4.15.1","eol":null,"hubHref":null},{"vendor":"suse","product":"spacecmd&distro=SUSE Multi Linux Manager Tools RES-7","name":"spacecmd","label":"spacecmd&distro=SUSE Multi Linux Manager Tools RES-7","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacecmd&distro=SUSE Multi Linux Manager Tools RES-7","purlType":"rpm","versions":[{"text":"< 5.2.10-70002.3.15.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.2.10-70002.3.15.1","eol":null,"hubHref":null},{"vendor":"suse","product":"spacecmd&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","name":"spacecmd","label":"spacecmd&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacecmd&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","purlType":"rpm","versions":[{"text":"< 5.2.10-70002.3.15.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.2.10-70002.3.15.1","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-client-tools&distro=SUSE Multi Linux Manager Tools RES-7","name":"spacewalk-client-tools","label":"spacewalk-client-tools&distro=SUSE Multi Linux Manager Tools RES-7","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-client-tools&distro=SUSE Multi Linux Manager Tools RES-7","purlType":"rpm","versions":[{"text":"< 5.2.7-70002.3.12.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.2.7-70002.3.12.1","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-client-tools&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","name":"spacewalk-client-tools","label":"spacewalk-client-tools&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-client-tools&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","purlType":"rpm","versions":[{"text":"< 5.2.7-70002.3.12.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.2.7-70002.3.12.1","eol":null,"hubHref":null},{"vendor":"suse","product":"venv-salt-minion&distro=SUSE Multi Linux Manager Tools RES-7","name":"venv-salt-minion","label":"venv-salt-minion&distro=SUSE Multi Linux Manager Tools RES-7","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/venv-salt-minion&distro=SUSE Multi Linux Manager Tools RES-7","purlType":"rpm","versions":[{"text":"< 3006.0-70002.5.22.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3006.0-70002.5.22.1","eol":null,"hubHref":null},{"vendor":"suse","product":"venv-salt-minion&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","name":"venv-salt-minion","label":"venv-salt-minion&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/venv-salt-minion&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","purlType":"rpm","versions":[{"text":"< 3006.0-70002.5.22.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3006.0-70002.5.22.1","eol":null,"hubHref":null}],"affectedCount":37,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264583-1/","label":"www.suse.com/support/update/announcement/2026/suse-su-20264583-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1218722","label":"bugzilla.suse.com/1218722","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1230949","label":"bugzilla.suse.com/1230949","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1252286","label":"bugzilla.suse.com/1252286","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1254400","label":"bugzilla.suse.com/1254400","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1257151","label":"bugzilla.suse.com/1257151","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1257599","label":"bugzilla.suse.com/1257599","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1259989","label":"bugzilla.suse.com/1259989","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1261969","label":"bugzilla.suse.com/1261969","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1261970","label":"bugzilla.suse.com/1261970","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1262098","label":"bugzilla.suse.com/1262098","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1262319","label":"bugzilla.suse.com/1262319","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1262429","label":"bugzilla.suse.com/1262429","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1262654","label":"bugzilla.suse.com/1262654","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1262803","label":"bugzilla.suse.com/1262803","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1263254","label":"bugzilla.suse.com/1263254","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1263442","label":"bugzilla.suse.com/1263442","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1263822","label":"bugzilla.suse.com/1263822","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1264962","label":"bugzilla.suse.com/1264962","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1265267","label":"bugzilla.suse.com/1265267","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1265268","label":"bugzilla.suse.com/1265268","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1265413","label":"bugzilla.suse.com/1265413","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1266669","label":"bugzilla.suse.com/1266669","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1267261","label":"bugzilla.suse.com/1267261","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1267581","label":"bugzilla.suse.com/1267581","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1267821","label":"bugzilla.suse.com/1267821","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1268325","label":"bugzilla.suse.com/1268325","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1268395","label":"bugzilla.suse.com/1268395","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1268396","label":"bugzilla.suse.com/1268396","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1268397","label":"bugzilla.suse.com/1268397","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1268977","label":"bugzilla.suse.com/1268977","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1269066","label":"bugzilla.suse.com/1269066","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1269788","label":"bugzilla.suse.com/1269788","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1269959","label":"bugzilla.suse.com/1269959","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1270285","label":"bugzilla.suse.com/1270285","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1271192","label":"bugzilla.suse.com/1271192","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1271428","label":"bugzilla.suse.com/1271428","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1271613","label":"bugzilla.suse.com/1271613","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1273094","label":"bugzilla.suse.com/1273094","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2024-22195","label":"www.suse.com/security/cve/CVE-2024-22195","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13836","label":"www.suse.com/security/cve/CVE-2025-13836","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0864","label":"www.suse.com/security/cve/CVE-2026-0864","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11940","label":"www.suse.com/security/cve/CVE-2026-11940","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11972","label":"www.suse.com/security/cve/CVE-2026-11972","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-13346","label":"www.suse.com/security/cve/CVE-2026-13346","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-1502","label":"www.suse.com/security/cve/CVE-2026-1502","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-15308","label":"www.suse.com/security/cve/CVE-2026-15308","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-1703","label":"www.suse.com/security/cve/CVE-2026-1703","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27459","label":"www.suse.com/security/cve/CVE-2026-27459","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3219","label":"www.suse.com/security/cve/CVE-2026-3219","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3276","label":"www.suse.com/security/cve/CVE-2026-3276","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3446","label":"www.suse.com/security/cve/CVE-2026-3446","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3479","label":"www.suse.com/security/cve/CVE-2026-3479","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40475","label":"www.suse.com/security/cve/CVE-2026-40475","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41066","label":"www.suse.com/security/cve/CVE-2026-41066","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4360","label":"www.suse.com/security/cve/CVE-2026-4360","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44431","label":"www.suse.com/security/cve/CVE-2026-44431","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45409","label":"www.suse.com/security/cve/CVE-2026-45409","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4786","label":"www.suse.com/security/cve/CVE-2026-4786","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49825","label":"www.suse.com/security/cve/CVE-2026-49825","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49853","label":"www.suse.com/security/cve/CVE-2026-49853","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49854","label":"www.suse.com/security/cve/CVE-2026-49854","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49855","label":"www.suse.com/security/cve/CVE-2026-49855","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6019","label":"www.suse.com/security/cve/CVE-2026-6019","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6100","label":"www.suse.com/security/cve/CVE-2026-6100","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6357","label":"www.suse.com/security/cve/CVE-2026-6357","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7210","label":"www.suse.com/security/cve/CVE-2026-7210","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7774","label":"www.suse.com/security/cve/CVE-2026-7774","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8328","label":"www.suse.com/security/cve/CVE-2026-8328","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8643","label":"www.suse.com/security/cve/CVE-2026-8643","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2024-22195","CVE-2025-13836","CVE-2026-0864","CVE-2026-11940","CVE-2026-11972","CVE-2026-13346","CVE-2026-1502","CVE-2026-15308","CVE-2026-1703","CVE-2026-27459","CVE-2026-3219","CVE-2026-3276","CVE-2026-3446","CVE-2026-3479","CVE-2026-40475","CVE-2026-41066","CVE-2026-4360","CVE-2026-44431","CVE-2026-45409","CVE-2026-4786","CVE-2026-49825","CVE-2026-49853","CVE-2026-49854","CVE-2026-49855","CVE-2026-6019","CVE-2026-6100","CVE-2026-6357","CVE-2026-7210","CVE-2026-7774","CVE-2026-8328","CVE-2026-8643"],"downstream":[],"duplicates":[],"related":["CVE-2024-22195","CVE-2025-13836","CVE-2026-0864","CVE-2026-11940","CVE-2026-11972","CVE-2026-13346","CVE-2026-1502","CVE-2026-15308","CVE-2026-1703","CVE-2026-27459","CVE-2026-3219","CVE-2026-3276","CVE-2026-3446","CVE-2026-3479","CVE-2026-40475","CVE-2026-41066","CVE-2026-4360","CVE-2026-44431","CVE-2026-45409","CVE-2026-4786","CVE-2026-49825","CVE-2026-49853","CVE-2026-49854","CVE-2026-49855","CVE-2026-6019","CVE-2026-6100","CVE-2026-6357","CVE-2026-7210","CVE-2026-7774","CVE-2026-8328","CVE-2026-8643"]},"timeline":[{"kind":"published","date":"2026-10-08T08:21:47.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-10-08T19:15:05.005Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T23:00:14.277Z","stale":false,"partial":false}}